CVE-2001-0008

Description

Backdoor account in Interbase database server allows remote attackers to overwrite arbitrary files using stored procedures.

Affected products

• borland_software / interbase4.0 – 4.0
• borland_software / interbase5.0 – 5.0
• borland_software / interbase6.0 – 6.0
• FirebirdSQL / firebird0.9.3

Exploits & proofs of concept

• exploit-dbBorland/Inprise Interbase 4.0/5.0/6.0 - Backdoor Passwordby Frank Schlottmann-Goedde

References

• MISChttps://exchange.xforce.ibmcloud.com/vulnerabilities/5911
• MISChttp://www.securityfocus.com/bid/2192
• VENDOR_ADVISORYhttp://www.cert.org/advisories/CA-2001-01.html